PT-2007-5626 · Image Space · Factor

Published 2007-08-21 · Updated 2018-10-15 · CVE-2007-4445

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Image Space rFactor versions 1.250 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in either a daemon crash or a UDP port block, via specially crafted packets. Specifically, the daemon crash can occur through packets with IDs 0x30, 0x38, and invalid 13-bit integers in packets with IDs 0x60 and 0x68. The UDP port block can be achieved through packets with IDs 0x20 and 0x28.

Recommendations For Image Space rFactor versions 1.250 and earlier, as a temporary workaround, consider restricting or disabling the handling of packets with IDs 0x20, 0x28, 0x30, 0x38, 0x60, and 0x68 until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-4445

Affected Products

Factor

References · 12

• 🔥 http://aluigi.org/poc/rfactorx.zip · Exploit
• http://secunia.com/advisories/26526 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4445 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36094 · Note
• http://securityfocus.com/archive/1/480921/100/200/threaded · Note
• http://forum.racesimcentral.com/showthread.php?t=298659 · Note
• http://securityfocus.com/bid/25358 · Note
• http://securityreason.com/securityalert/3037 · Note
• http://rfactor.net/?page=news_09-26_1255 · Note
• http://securityfocus.com/archive/1/480591/100/200/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36095 · Note
• http://securityfocus.com/archive/1/477023/100/0/threaded · Note